Data Privacy
The Security of Personal Data

Data Privacy

More languages: Deutsch | Français | 한국의 | Español

Website /Contact / Inquiries

When accessing our Internet pages, our web providers log for us together with your IP address the names of the files you accessed, the Internet page from which you accessed our pages, the date and time of the access and some information on the web browser you used (together "access protocol"). The IP addresses in the access logs are anonymised as soon as they are collected. The storage and processing of the anonymous access logs is based on a legitimate interest in maintaining and improving the security, stability and quality of our website (Art. 6 para. 1 lit f. GDPR).

When you access our website, we log the access to certain content (clicks) for statistical purposes. If you access our website from an internet ad (Google Ads), along with your clicks we log the name of the ad and the search terms that led to the ad being displayed. The data collected is anonymous and does not allow individual visitors to be identified.

If you contact us by e-mail, your e-mail will be stored and processed by us to process your request. This processing takes place upon your request and is necessary for the execution of pre-contractual measures (e.g. general information on function, licensing and prices of our software) and, if necessary, for the establishment and execution of contracts (e.g. preparation of offers, communication with existing customers) (Art. 6 para. 1 lit b. GDPR) or based on our legitimate interest in maintaining contact with (potential) business partners or their employees (Art. 6 para. 1 lit f. GDPR). After 12 months at the latest, all e-mails are archived with very limited access. Business e-mail correspondence is subject to legal retention requirements that last between six and ten years.

If you report errors or request improvements your contact data (e-mail address, telephone number and name of the contact person) will be stored by us. The processing of personal data takes place for possible questions of our support team for the execution of the software support (Art. 6 exp. 1 lit b. GDPR). If you are not our contractual partner yourself, but e.g. an employee of one of our customers, the legal basis for data processing is our legitimate interest in making our support services for customers and users as effective as possible (Art. 6 exp. 1 lit f. GDPR). We store the contact data for this purpose only as long as it is needed to process the request, at most until the problem is solved or the improvement is implemented.

Offer and Order

Customer master data including customer contact data (e-mail address, telephone number and name of contact person) are stored and processed in the invoicing software of our sales team (Art. 6 para. 1 lit b. GDPR) for the establishment and execution of contracts within the scope of requests for quotations and orders. If you are not our contractual partner yourself, but e.g. an employee of one of our customers, the legal basis for data processing is our legitimate interest in making our contract management as effective as possible and having direct contact persons at our customers (Art. 6 exp. 1 lit f. GDPR). All offers, orders, invoices and delivery notes are archived in the form of electronic documents until the end of the statutory retention period, which lasts between six and ten years.

When you order in our online shop, your order and your contact details are stored in the online shop's database. The storage of personal data such as e-mail address, telephone number and name of the contact person serves to process the contract (Art. 6 para. 1 lit b. GDPR). If you are not our contractual partner yourself, but e.g. an employee of one of our customers, the legal basis for data processing is our legitimate interest in making our contract management as effective as possible and having direct contact persons at our customers (Art. 6 exp. 1 lit f. GDPR). Registering in the online shop gives you access to your contact details for future orders. Unregistered customers and their orders will be deleted from the database of the online shop after 3 months at the latest. As a registered customer, your contact data and orders will remain stored in the online shop until you request their deletion.

If you pay by credit card, the card payment is sent directly to our PCI DSS-certified payment provider. We ourselves have no contact with credit card data. However, the type of credit card, the cardholder, as well as the purchase including the given contact data are stored by the payment provider. We need this data to check and book the payment (Art. 6 para. 1 lit b. GDPR). If you are not our contractual partner yourself, but e.g. an employee of one of our customers, the legal basis for the data processing is our legitimate interest in offering our customers the possibility of secure and fast online payment by credit card and thus at the same time reducing our risk of non-payment (Art. 6 para. 1 lit f. GDPR).

Each ordered license is stored together with the contact data of the licensee (company name or name, address, e-mail address, telephone) in our license database. The license database is used to generate license keys and to monitor usage and thus protect the license from unauthorized use. The storage of the licensee's contact e-mail address and telephone number serves any queries that may be necessary in the event of activation problems or license inconsistencies (Art. 6 para. 1 lit b. GDPR). If you are not our contractual partner yourself, but e.g. an employee of one of our customers, the legal basis for data processing is our legitimate interest in making our license management as effective as possible and having direct contact persons at our customers (Art. 6 para. 1 lit f. GDPR). The contact data will be stored until we are informed of a new contact person, a new licensee or the termination of the license agreement.

If the contract for using our software is entered into between you or your company and one of our sales partners (resellers or so-called middlemen), we will still directly issue the license keys. In such cases, we (also) receive personal data from our sales partners for the purposes mentioned in the previous paragraph and in accordance with the applicable legal provisions.

Use of the Software

When requesting license keys to activate the program, we store the e-mail address to which the key was sent and the identification number of the computer on which the software was activated (Art. 6 para. 1 lit. b GDPR) in order to execute the contract for the use of our software. If license inconsistencies occur during the execution of the contract, this license usage data will be used and, if necessary, communicated to the licensee (Art. 6 para. 1 lit. b GDPR). If you are not our contractual partner yourself, but e.g. an employee of one of our customers, the legal basis for data processing is our legitimate interest in making our license management as effective as possible and having direct contact persons at our customers (Art. 6 para. 1 lit f. GDPR). The e-mail addresses of the license users are stored until we are notified of a new licensee or the termination of the license agreement. License keys can only be sent by e-mail or fax.

When requesting so-called demo keys to test the program free of charge, we store the e-mail address to which the demo key was sent, the identification number of the computer on which the software was tested, as well as the company name (or name) and the address of the demo licensee (Art. 6 para. 1 lit. b GDPR) in order to execute the contract for the test use of our software. When a new major version of the program is released, this data is automatically made anonymous or deleted. Demo keys can only be sent by e-mail.

If the contract for using our software is entered into between you or your company and one of our sales partners (resellers or so-called middlemen), we will still directly issue the license keys (or Demo keys, if applicable). In such cases, we (also) receive personal data from our sales partners for the purposes mentioned in the previous paragraphs and in accordance with the applicable legal provisions.

In case of serious program errors 3D-Tool creates an error log with information about the state of 3D-Tool and the operating system at the time of the error. The log does not contain any personal data. You can check the contents of the log in the error dialogue. The protocol is sent as an encrypted e-mail attachment. The e-mail is generated in your standard e-mail program and sent by you. Upon receipt of the error log, we will store your contact details as far as they are visible in the e-mail (e-mail address, telephone number and name of the contact person). The processing of personal data takes place within the scope of our software support for possible queries of our support team and to inform you about possible solutions (Art. 6 para. 1 lit. f GDPR). If you are not our contractual partner yourself, but e.g. an employee of one of our customers, or have entered into a contract for using our software with one of our sales partners, the legal basis for data processing is our legitimate interest in making our support services for customers and users as effective as possible (Art. 6 para. 1 lit. f GDPR). Your contact data will only be stored until the error processing is completed or you inform us that you do not wish to be contacted again. You can also inform us of this in the e-mail you use to send the error log. In this case your contact data will be deleted immediately, but, consequently, you will not receive any information about the error.

Passing on of Personal Data

Personal data will only be passed on to third parties in the following cases and in principle limited to the minimum required:

• We have your express consent.
• The transfer is made to partners necessary for the execution of the contract, also within the framework of an commissioned data processing agreement and/or secured by appropriate measures within the meaning of Art. 28 GDPR.
• We are legally obliged to pass on the data.

Personal data is trespassed on to the following recipients or categories of recipients:

• All inquiries, orders, invoices and license information are processed by our support service provider Susan Arnold e.K., Deutschland.
• Your website usage data, your online shop orders, your license information and your e-mails are processed on European servers of 1und1 IONOS SE.
• Your credit card payments are processed by PCI-DSS certified payment providers 1und1 IONOS SE iPayment and Elavon Financial Services DAC, Germany.
• Invoices are stored on server of DATEV eG, Nürnberg. Our tax consultants has access and, if necessary, the responsible tax authorities.

Contact details of the person responsible and your rights according to the GDPR, in particular your right of objection

Responsible for the collection, processing and use of your personal data within the meaning of the GDPR is 3D-Tool GmbH & Co. KG, Im Steiles 23/1, 69493 Weinheim, Germany represented by 3D-Tool Verwaltungs GmbH based in Weinheim, Managing Director Ingo Wulf.

You have the right:

1. to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you may obtain information about the purposes of the processing, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the envisaged storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data, if these have not been collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information on their details;
   We may only refuse to disclose information to you if and to the extent that such information would reveal information which must be kept secret in accordance with a legal provision or its nature, in particular because of the overriding legitimate interests of a third party (§ 29 para. 1 sentence 2 FDPA), the responsible public authority has stated to us that the disclosure of the data would endanger public security or order or otherwise be detrimental to the welfare of the Federation or a Land (§ 34 para. 1 no. 1 FDPA in conjunction with § 33 para. 1 no. 2 lit. b FDPA), or the data are stored only because they may not be deleted due to legal or statutory storage regulations, or exclusively serve purposes of data backup or data protection control and the provision of information would require disproportionate effort and processing for other purposes is excluded by suitable technical and organizational measures (§ 34 para 1 no. 2 FDPA).
2. to immediately request the correction of incorrect or complete personal data stored by us in accordance with Art. 16 GDPR;
3. to request the erasure of your personal data stored with us in accordance with Art. 17 GDPR, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to establish, exercise or defend legal claims;
4. pursuant to Art. 18 GDPR, to demand the restriction of the processing of your personal data if you dispute the accuracy of the data, if the processing is unlawful but you refuse to delete it and we no longer need the data, but you need it to establish, exercise or defend legal claims or you have filed an objection against the processing pursuant to Art. 21 GDPR;
5. to receive your personal data provided to us in a structured, commonly used and machine-readable format in accordance with Art. 20 GDPR or to request its transfer to another person responsible;
6. in accordance with Art. 7 para. 3 GDPR, to revoke your consent to us at any time. As a result, we are no longer allowed to continue the processing of data based on this consent in the future;

You may object to the processing of your personal data on the basis of legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR, pursuant to Art. 21 GDPR, insofar as there are reasons for this which arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right of objection, which we will implement without specifying a particular situation.

In addition, you have a general right to lodge a complaint with the data protection supervisory authority responsible for you. The authority responsible for 3D-Tool GmbH & Co KG is the "Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg".

If you have any questions or would like to exercise your rights, simply send an e-mail, a fax or a letter to:

3D-Tool GmbH & Co. KG
Im Steiles 23/1
69469 Weinheim
Germany
E-Mail: team@3d-tool.de